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Question: 1 


Which VMware product allows you to query an endpoint like a database? 


A. VMware NSX-T Data Center 

B. VMware Carbon Black Audit & Remediation 
C. VMware Workspace ONE UEM 

D. VMware Carbon Black Endpoint Standard 


Answer: C 


Question: 2 


Which three are industry best practices of Zero Trust framework? (Choose three.) 


A. Employee machines need to have a passcode profile setup 

B. Employee machines on Internal network are trusted and have access to all internal resources 
C. Employee machines are checked for compliance before they get access to applications 

D. Employees are not required to provide MFA to access internal resources over VPN 

E. Employees get access to only the required resources to get their job done 


Answer: A, C, E 


Question: 3 


Which three default connectors are available in Workspace ONE Intelligence to execute automation 
actions? (Choose three.) 


A. ServiceNow 

B. vRealize Operations Manager 
C. Slack 

D. Log Insight 

E. Workspace ONE UEM 


Answer: A, C, E 


Explanation: 
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE/services/intelligence- 


documentation/GUID-21 intel _automations 
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Question: 4 


Refer to the exhibit. 


J Name ID Sources Destinations Services Profiles Applied to Action 
Block SSH Traffic (1) Category: LOCAL GATEWAY 
Block SSH Any App-Servers OSSH None TO-GW-01 éDopv C 
DB Servers 
Web Servers 


Which statement is true about the firewall rule? 


A. It is a gateway firewall applied to a Tier-O gateway that drops traffic on port 22 

B. It is a distributed firewall applied to App-Services, DB-Servers and Web-Servers that rejects traffic 
on port 22 

C. It is a distributed firewall applied to App-Services, DB-Servers and Web-Servers that drops traffic 
on port 22 

D. It is a gateway firewall applied to a Tier-0 gateway that rejects traffic on port 22 


Answer: A 
Question: 5 
Refer to the exhibit. 
Potentially Suspicious Activity + 
EN N Mah à ER 
G) Poten 3] j] 0 
Malwar 2 E 
3 PUPs 0 


From the VMware Carbon Black Cloud console, what page do you go to after clicking the Non- 
Malware bar in the Potentially Suspicious Activity chart? 


A. Notifications page with the selected alert filtered 

B. Reputations page with the selected reputation filtered 
C. Investigate page with the selected reputation filtered 
D. Alerts page with the selected alert filtered 


Answer: D 


Reference: https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/carbon-black-cloud- 
user-guide.pdf (15) 
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